Skip to Content

Don't miss Joystiq's up-to-the-minute live coverage of E3!
AOL Tech

E-Mail Security Hole Found in Apple's OSX Leopard

Apple's New Leopard Has Old Security FlawMac addicts like to tout their chosen operating system's security superiority over those who have chosen Microsoft's product, but a report of a major security oversight in the latest release, Leopard, might just give Windows users something to snicker about. It seems the latest Apple OS has a critical flaw in its e-mail application -- a flaw that was fixed in older versions of OSX.

The flaw enables a person to attach malicious code to an e-mail attachment that looks like a simple JPEG image. When you double-click on that supposed image, the code runs and can do whatever it likes to your system, including deleting all your files (or just running something in the background to steal all your passwords). It surreptitiously uses the Unix command-line prompt that few OSX users ever see.

Older versions of Apple Mail pop-up a warning when such attachments are run, but this new one does not, leaving less-in-the-know Mac users somewhat in the cold. To see if your Mac is properly warning you about these e-mails, you can have a safe one sent to you by using the Emailcheck service at heise Security.

From heise Security

Related Links:

Relevant Posts

Subscribe to these comments

Reader Comments (Page 1 of 1)

Add your comments

New Users

Current Users

Please keep your comments relevant to this blog entry. Email addresses are never displayed, but they are required to confirm your comments.

When you enter your name and email address, you'll be sent a link to confirm your comment, and a password. To leave another comment, just use that password.

To create a live link, simply type the URL (including http://) or email address and we will make it a live link for you. You can put up to 3 URLs in your comments. Line breaks and paragraphs are automatically converted — no need to use <p> or <br /> tags.

Please note that gratuitous links to your site are viewed as spam and may result in removed comments. And yes, comments are moderated.



AOL Tech Network



Latest Reviews from CNET.com

CNET provides the latest tech news, unbiased reviews, videos, podcasts, software, and downloads, making tech products easy to find, understand and use.

Top Product Reviews

AOL News

Other Weblogs Inc. Network blogs you might be interested in: